Trojan.KillFiles.14160

Техническая информация

Для обеспечения автозапуска и распространения:

Создает или изменяет следующие файлы:

%ALLUSERSPROFILE%\Start Menu\Programs\Startup\WindowsUpdate.exe

Подменяет следующие исполняемые системные файлы:

<SYSTEM32>\usrmlnka.exe файлом <SYSTEM32>\SET4.tmp
<DRIVERS>\termdd.sys файлом <DRIVERS>\SET2.tmp

Изменения в файловой системе:

Создает следующие файлы:

<SYSTEM32>\SET3.tmp
<SYSTEM32>\SET4.tmp
<SYSTEM32>\dllcache\usrmlnka.exe.new
<SYSTEM32>\dllcache\termdd.sys.new
C:\System Volume Information\_restore{E7F0F64C-F7E5-4319-8757-E9A20C1C4E14}\RP15\RestorePointSize
<DRIVERS>\SET1.tmp
<DRIVERS>\SET2.tmp

Удаляет следующие файлы:

<SYSTEM32>\npptools.dll
<SYSTEM32>\noise.dat
<SYSTEM32>\nusrmgr.cpl
<SYSTEM32>\oobe\actsetup\actconn.htm
<SYSTEM32>\oembios.dat
<SYSTEM32>\msscript.ocx
<SYSTEM32>\mshtmler.dll
<SYSTEM32>\mswdat10.dll
<SYSTEM32>\nlhtml.dll
<SYSTEM32>\mydocs.dll
<SYSTEM32>\oobe\actsetup\adrdyreg.htm
<SYSTEM32>\oobe\actsetup\adeskerr.htm
<SYSTEM32>\oobe\actsetup\apolicy.htm
<SYSTEM32>\oobe\actsetup\areg1.htm
<SYSTEM32>\oobe\actsetup\aprvcyms.htm
<SYSTEM32>\oobe\actsetup\activ.htm
<SYSTEM32>\oobe\actsetup\actdone.htm
<SYSTEM32>\oobe\actsetup\activerr.htm
<SYSTEM32>\oobe\actsetup\actlan.htm
<SYSTEM32>\oobe\actsetup\activsvc.htm
<SYSTEM32>\mshtmled.dll
<SYSTEM32>\iprtrmgr.dll
<SYSTEM32>\iaspolcy.dll
<SYSTEM32>\lnkstub.exe
<SYSTEM32>\lusrmgr.msc
<SYSTEM32>\lprmonui.dll
<SYSTEM32>\gpupdate.exe
<SYSTEM32>\format.com
<SYSTEM32>\hhctrl.ocx
<SYSTEM32>\hypertrm.dll
<SYSTEM32>\html.iec
<SYSTEM32>\msdatsrc.tlb
<SYSTEM32>\mprmsg.dll
<SYSTEM32>\msdxm.ocx
<SYSTEM32>\mshtml.tlb
<SYSTEM32>\mshtml.dll
<SYSTEM32>\mlang.dat
<SYSTEM32>\Macromed\Flash\flash.ocx
<SYSTEM32>\mp43dmod.dll
<SYSTEM32>\mpeg2data.ax
<SYSTEM32>\mp4sdmod.dll
<SYSTEM32>\oobe\actsetup\aregdial.htm
<SYSTEM32>\oobe\html\mouse\images\pisam.jpg
<SYSTEM32>\oobe\html\mouse\images\pisa.jpg
<SYSTEM32>\oobe\html\mouse\images\prague.jpg
<SYSTEM32>\oobe\html\mouse\images\tyrol.jpg
<SYSTEM32>\oobe\html\mouse\images\praguem.jpg
<SYSTEM32>\oobe\html\mouse\images\heidelb.jpg
<SYSTEM32>\oobe\html\mouse\images\bulzanom.jpg
<SYSTEM32>\oobe\html\mouse\images\heidelbm.jpg
<SYSTEM32>\oobe\html\mouse\images\parism.jpg
<SYSTEM32>\oobe\html\mouse\images\paris.jpg
<SYSTEM32>\oobe\html\mouse\mouse_a.htm
<SYSTEM32>\oobe\html\mouse\mouse.htm
<SYSTEM32>\oobe\html\mouse\mouse_b.htm
<SYSTEM32>\oobe\html\mouse\mouse_d.htm
<SYSTEM32>\oobe\html\mouse\mouse_c.htm
<SYSTEM32>\oobe\html\mouse\images\venice.jpg
<SYSTEM32>\oobe\html\mouse\images\tyrolm.jpg
<SYSTEM32>\oobe\html\mouse\images\venicem.jpg
<SYSTEM32>\oobe\html\mouse\images\veronam.jpg
<SYSTEM32>\oobe\html\mouse\images\verona.jpg
<SYSTEM32>\oobe\html\mouse\images\bulzano.jpg
<SYSTEM32>\oobe\error\cnncterr.htm
<SYSTEM32>\oobe\dtsgnup.htm
<SYSTEM32>\oobe\error\dialtone.htm
<SYSTEM32>\oobe\error\isp2busy.htm
<SYSTEM32>\oobe\error\hndshake.htm
<SYSTEM32>\oobe\actsetup\aregsty2.css
<SYSTEM32>\oobe\actsetup\aregdone.htm
<SYSTEM32>\oobe\actsetup\aregstyl.css
<SYSTEM32>\oobe\actshell.htm
<SYSTEM32>\oobe\actsetup\ausrinfo.htm
<SYSTEM32>\oobe\html\dslmain\dsl_b.htm
<SYSTEM32>\oobe\html\dslmain\dsl_a.htm
<SYSTEM32>\oobe\html\iconnect\icntlast.htm
<SYSTEM32>\oobe\html\isptype\isptype.htm
<SYSTEM32>\oobe\html\iconnect\iconnect.htm
<SYSTEM32>\oobe\error\pberr.htm
<SYSTEM32>\oobe\error\noanswer.htm
<SYSTEM32>\oobe\error\pulse.htm
<SYSTEM32>\oobe\html\dslmain\dslmain.htm
<SYSTEM32>\oobe\error\toobusy.htm
%WINDIR%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Escalation\Email\rcscreen6_head.htm
%WINDIR%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Escalation\Email\rcscreen6.htm
%WINDIR%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Escalation\Email\rcscreen7.htm
%WINDIR%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Escalation\Email\rcscreen9.htm
%WINDIR%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Escalation\Email\rcscreen8.htm
%WINDIR%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Escalation\Email\rcDetails.htm
%WINDIR%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Escalation\Email\escalationhelp.htm
%WINDIR%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Escalation\Email\rcInviteStatus.htm
%WINDIR%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Escalation\Email\rcscreen5.htm
%WINDIR%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Escalation\Email\rcscreen4.htm
%WINDIR%\Registration\{02D4B3F1-FD88-11D1-960D-00805FC79235}.{BF4C4D5C-6924-41E8-9BF1-DCC37DF6F31D}.crmlog
%WINDIR%\regedit.exe
%WINDIR%\regopt.log
%WINDIR%\Rhododendron.bmp
%WINDIR%\repair\ntuser.dat
%WINDIR%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Escalation\Unsolicited\UnSolicitedRCUI.htm
%WINDIR%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Escalation\Email\ShieldsUpMsg.htm
%WINDIR%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\rcstatus.htm
%WINDIR%\Provisioning\Schemas\register.xdr
%WINDIR%\Prairie Wind.bmp
%WINDIR%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Escalation\Common\rcscreen3.htm
%WINDIR%\pchealth\helpctr\System\UpdateCtr\updatecenter.htm
%WINDIR%\pchealth\helpctr\System\UpdateCtr\learnWU.htm
%WINDIR%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Connection.htm
%WINDIR%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\OfflineOptions.htm
%WINDIR%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\OfflineDC.htm
%WINDIR%\pchealth\helpctr\System\sysinfo\wmi_data.js
%WINDIR%\pchealth\helpctr\System\sysinfo\sysSoftwareInfo.htm
%WINDIR%\pchealth\helpctr\System\UpdateCtr\AboutWU.htm
%WINDIR%\pchealth\helpctr\System\UpdateCtr\LearnInternet.htm
%WINDIR%\pchealth\helpctr\System\UpdateCtr\Learn.htm
%WINDIR%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\confirm.htm
%WINDIR%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Common\RCMoreInfo.htm
%WINDIR%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Escalation\Common\rcConnection.htm
%WINDIR%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Escalation\Common\rcscreen2.htm
%WINDIR%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Escalation\Common\rcscreen1.htm
%WINDIR%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Common\ConnIssue.htm
%WINDIR%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\pss_getting_worldwide_help.htm
%WINDIR%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Common\icon_information_32x.gif
%WINDIR%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Common\RAHelp.htm
%WINDIR%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Common\LearnInternet.htm
%WINDIR%\River Sumida.bmp
<DRIVERS>\nwlnkipx.sys
<DRIVERS>\nwlnkfwd.sys
<DRIVERS>\nwlnknb.sys
<DRIVERS>\raspppoe.sys
<DRIVERS>\nwlnkspx.sys
<SYSTEM32>\docprop.dll
<SYSTEM32>\dmview.ocx
<SYSTEM32>\docprop2.dll
<DRIVERS>\nwlnkflt.sys
<DRIVERS>\gmreadme.txt
<SYSTEM32>\drmv2clt.dll
<SYSTEM32>\drmstor.dll
<SYSTEM32>\dssec.dat
<SYSTEM32>\eula.txt
<SYSTEM32>\emptyregdb.dat
<DRIVERS>\raspti.sys
<DRIVERS>\raspptp.sys
<DRIVERS>\termdd.sys
<SYSTEM32>\drmclien.dll
<DRIVERS>\update.sys
<SYSTEM32>\dmocx.dll
<SYSTEM32>\asctrls.ocx
%WINDIR%\srchasst\mui\0409\lcldocs.xml
<SYSTEM32>\aspnet_counters.dll
<SYSTEM32>\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\msxpsdrv.CAT
<SYSTEM32>\camocx.dll
%WINDIR%\setuplog.txt
%WINDIR%\Santa Fe Stucco.bmp
%WINDIR%\Soap Bubbles.bmp
%WINDIR%\srchasst\mui\0409\lcldate.xml
%WINDIR%\srchasst\mui\0409\charctxt.xml
<SYSTEM32>\dataclen.dll
<SYSTEM32>\d3drm.dll
<SYSTEM32>\datime.dll
<SYSTEM32>\diactfrm.dll
<SYSTEM32>\daxctle.ocx
<SYSTEM32>\charmap.exe
<SYSTEM32>\CatRoot2\dberr.txt
<SYSTEM32>\Com\comempty.dat
<SYSTEM32>\compstui.dll
<SYSTEM32>\Com\comrereg.exe
<SYSTEM32>\oobe\html\mouse\mouse_e.htm
<SYSTEM32>\regedt32.exe
<SYSTEM32>\regapi.dll
<SYSTEM32>\regini.exe
<SYSTEM32>\regsvr32.exe
<SYSTEM32>\regsvc.dll
<SYSTEM32>\pstorsvc.dll
<SYSTEM32>\pstorec.dll
<SYSTEM32>\rasphone.exe
<SYSTEM32>\reg.exe
<SYSTEM32>\rasppp.dll
<SYSTEM32>\shdocvw.dll
<SYSTEM32>\shdoclc.dll
<SYSTEM32>\simpdata.tlb
<SYSTEM32>\spool\XPSEP\amd64\msxpsdrv.inf
<SYSTEM32>\spool\XPSEP\amd64\msxpsdrv.cat
<SYSTEM32>\regwizc.dll
<SYSTEM32>\regwiz.exe
<SYSTEM32>\Restore\MachineGuid.txt
<SYSTEM32>\setup.bmp
<SYSTEM32>\secupd.dat
<SYSTEM32>\proctexe.ocx
<SYSTEM32>\oobe\setup\reg1.htm
<SYSTEM32>\oobe\setup\refdial.htm
<SYSTEM32>\oobe\setup\reg3.htm
<SYSTEM32>\oobe\setup\security.htm
<SYSTEM32>\oobe\setup\regdial.htm
<SYSTEM32>\oobe\setup\oempriv.htm
<SYSTEM32>\oobe\setup\neweula2.htm
<SYSTEM32>\oobe\setup\Oobedisc.htm
<SYSTEM32>\oobe\setup\prvcyms.htm
<SYSTEM32>\oobe\setup\prodkey.htm
<SYSTEM32>\perfh009.dat
<SYSTEM32>\perfd009.dat
<SYSTEM32>\perfi009.dat
<SYSTEM32>\plugin.ocx
<SYSTEM32>\photometadatahandler.dll
<SYSTEM32>\oobe\setup\username.htm
<SYSTEM32>\oobe\setup\timezone.htm
<SYSTEM32>\oobe\setup\welcome.htm
<SYSTEM32>\perfc009.dat
<SYSTEM32>\oobe\updshell.htm
<SYSTEM32>\spool\XPSEP\i386\msxpsdrv.cat
<SYSTEM32>\wmvcore.dll
<SYSTEM32>\wmv8ds32.ax
<SYSTEM32>\wmvdmod.dll
<SYSTEM32>\wmvds32.ax
<SYSTEM32>\wmvdmoe2.dll
<SYSTEM32>\wbem\wmiclivalueformat.xsl
<SYSTEM32>\wbem\wmiclitableformatnosys.xsl
<SYSTEM32>\wdl.trm
<SYSTEM32>\wmp.ocx
<SYSTEM32>\winstrm.dll
%WINDIR%\winnt256.bmp
%WINDIR%\winnt.bmp
%WINDIR%\Zapotec.bmp
<SYSTEM32>\SET3.tmp
<DRIVERS>\SET1.tmp
<SYSTEM32>\zipfldr.dll
<SYSTEM32>\wsnmp32.dll
%WINDIR%\Temp\Perflib_Perfdata_7e8.dat
%WINDIR%\WindowsUpdate.log
%WINDIR%\vmmreg32.dll
<SYSTEM32>\wbem\wmiclitableformat.xsl
<SYSTEM32>\tdc.ocx
<SYSTEM32>\sysmon.ocx
<SYSTEM32>\termcap
<SYSTEM32>\termsrv.dll
<SYSTEM32>\termmgr.dll
<SYSTEM32>\spool\XPSEP\msxpsdrv.cat
<SYSTEM32>\spool\XPSEP\i386\msxpsdrv.inf
<SYSTEM32>\spool\XPSEP\msxpsdrv.inf
<SYSTEM32>\strmfilt.dll
<SYSTEM32>\strmdll.dll
<SYSTEM32>\wbem\hform.xsl
<SYSTEM32>\usrmlnka.exe
<SYSTEM32>\wbem\regevent.mfl
<SYSTEM32>\wbem\wmiclimofformat.xsl
<SYSTEM32>\wbem\regevent.mof
<SYSTEM32>\umdmxfrm.dll
<SYSTEM32>\timedate.cpl
<SYSTEM32>\ureg.dll
<SYSTEM32>\usermode.dll
<SYSTEM32>\URTTEMP\regtlib.exe
<SYSTEM32>\oobe\images\skipoff.jpg
<SYSTEM32>\oobe\images\skipdown.jpg
<SYSTEM32>\oobe\images\skipover.jpg
<SYSTEM32>\oobe\images\wpaback.jpg
<SYSTEM32>\oobe\images\skipup.jpg
<SYSTEM32>\oobe\images\nextoff.jpg
<SYSTEM32>\oobe\images\nextdown.jpg
<SYSTEM32>\oobe\images\nextover.jpg
<SYSTEM32>\oobe\images\oemcoa.jpg
<SYSTEM32>\oobe\images\nextup.jpg
<SYSTEM32>\oobe\isperror\isphdshk.htm
<SYSTEM32>\oobe\isperror\ispdtone.htm
<SYSTEM32>\oobe\isperror\ispins.htm
<SYSTEM32>\oobe\isperror\isppberr.htm
<SYSTEM32>\oobe\isperror\ispnoanw.htm
<SYSTEM32>\oobe\images\wpaflag.jpg
<SYSTEM32>\oobe\images\wpabtm.jpg
<SYSTEM32>\oobe\images\wpakey.jpg
<SYSTEM32>\oobe\isperror\ispcnerr.htm
<SYSTEM32>\oobe\images\wpatop.jpg
<SYSTEM32>\oobe\images\newtop8.jpg
<SYSTEM32>\oobe\html\sconnect\scntlast.htm
<SYSTEM32>\oobe\html\mouse\mouse_k.htm
<SYSTEM32>\oobe\html\sconnect\sconnect.htm
<SYSTEM32>\oobe\images\backdown.jpg
<SYSTEM32>\oobe\icserror\icsdc.htm
<SYSTEM32>\oobe\html\mouse\mouse_g.htm
<SYSTEM32>\oobe\html\mouse\mouse_f.htm
<SYSTEM32>\oobe\html\mouse\mouse_h.htm
<SYSTEM32>\oobe\html\mouse\mouse_j.htm
<SYSTEM32>\oobe\html\mouse\mouse_i.htm
<SYSTEM32>\oobe\images\newbtm8.jpg
<SYSTEM32>\oobe\images\newbtm1.jpg
<SYSTEM32>\oobe\images\newmark1.jpg
<SYSTEM32>\oobe\images\newtop1.jpg
<SYSTEM32>\oobe\images\newmark8.jpg
<SYSTEM32>\oobe\images\backover.jpg
<SYSTEM32>\oobe\images\backoff.jpg
<SYSTEM32>\oobe\images\backup.jpg
<SYSTEM32>\oobe\images\mslogo.jpg
<SYSTEM32>\oobe\images\intro.wmv
<SYSTEM32>\oobe\isperror\ispphbsy.htm
<SYSTEM32>\oobe\setup\iconn.htm
<SYSTEM32>\oobe\setup\hnwprmpt.htm
<SYSTEM32>\oobe\setup\ics.htm
<SYSTEM32>\oobe\setup\ident2.htm
<SYSTEM32>\oobe\setup\ident1.htm
<SYSTEM32>\oobe\setup\drdyoem.htm
<SYSTEM32>\oobe\setup\drdymig.htm
<SYSTEM32>\oobe\setup\drdyref.htm
<SYSTEM32>\oobe\setup\fini.htm
<SYSTEM32>\oobe\setup\dtiwait.htm
<SYSTEM32>\oobe\setup\migdial.htm
<SYSTEM32>\oobe\setup\keybdcmt.htm
<SYSTEM32>\oobe\setup\miglist.htm
<SYSTEM32>\oobe\setup\neweula.htm
<SYSTEM32>\oobe\setup\migpage.htm
<SYSTEM32>\oobe\setup\ispwait.htm
<SYSTEM32>\oobe\setup\isp.htm
<SYSTEM32>\oobe\setup\jndomain.htm
<SYSTEM32>\oobe\setup\keybd.htm
<SYSTEM32>\oobe\setup\jndom_a.htm
<SYSTEM32>\oobe\setup\drdyisp.htm
<SYSTEM32>\oobe\regerror\rnoansw.htm
<SYSTEM32>\oobe\regerror\rhndshk.htm
<SYSTEM32>\oobe\regerror\rnomdm.htm
<SYSTEM32>\oobe\regerror\rpulse.htm
<SYSTEM32>\oobe\regerror\rpberr.htm
<SYSTEM32>\oobe\msobshel.htm
<SYSTEM32>\oobe\isperror\ispsbusy.htm
<SYSTEM32>\oobe\reg.isp
<SYSTEM32>\oobe\regerror\rdtone.htm
<SYSTEM32>\oobe\regerror\rcnterr.htm
<SYSTEM32>\oobe\setup\badeula.htm
<SYSTEM32>\oobe\setup\au_plcy.htm
<SYSTEM32>\oobe\setup\badpkey.htm
<SYSTEM32>\oobe\setup\dialup.htm
<SYSTEM32>\oobe\setup\compname.htm
<SYSTEM32>\oobe\setup\acterror.htm
<SYSTEM32>\oobe\regerror\rtoobusy.htm
<SYSTEM32>\oobe\setup\activate.htm
<SYSTEM32>\oobe\setup\autoupdt.htm
<SYSTEM32>\oobe\setup\act_plcy.htm
%WINDIR%\pchealth\helpctr\System\sysinfo\sysServicesInfo.htm
%WINDIR%\Help\Tours\htmlTour\question_icon.jpg
%WINDIR%\Help\Tours\htmlTour\pen_icon.jpg
%WINDIR%\Help\Tours\htmlTour\read_icon.jpg
%WINDIR%\Help\Tours\htmlTour\safe_easier.htm
%WINDIR%\Help\Tours\htmlTour\safe_better.htm
%WINDIR%\Help\Tours\htmlTour\img136.jpg
%WINDIR%\Help\Tours\htmlTour\img126.jpg
%WINDIR%\Help\Tours\htmlTour\img149.jpg
%WINDIR%\Help\Tours\htmlTour\logo.jpg
%WINDIR%\Help\Tours\htmlTour\intro_logo.jpg
%WINDIR%\Help\Tours\htmlTour\safe_easy_faster.jpg
%WINDIR%\Help\Tours\htmlTour\safe_easy_easier_ghost.jpg
%WINDIR%\Help\Tours\htmlTour\safe_easy_faster_big.jpg
%WINDIR%\Help\Tours\htmlTour\safe_faster.htm
%WINDIR%\Help\Tours\htmlTour\safe_easy_faster_ghost.jpg
%WINDIR%\Help\Tours\htmlTour\safe_easy_better_big.jpg
%WINDIR%\Help\Tours\htmlTour\safe_easy_better.jpg
%WINDIR%\Help\Tours\htmlTour\safe_easy_better_ghost.jpg
%WINDIR%\Help\Tours\htmlTour\safe_easy_easier_big.jpg
%WINDIR%\Help\Tours\htmlTour\safe_easy_easier.jpg
%WINDIR%\Help\Tours\htmlTour\img123.jpg
%WINDIR%\Help\Tours\htmlTour\img034.jpg
%WINDIR%\Help\Tours\htmlTour\img033a.jpg
%WINDIR%\Help\Tours\htmlTour\img040.jpg
%WINDIR%\Help\Tours\htmlTour\img060.jpg
%WINDIR%\Help\Tours\htmlTour\img046.jpg
%WINDIR%\Help\Tours\htmlTour\icon_up.jpg
%WINDIR%\Help\Tours\htmlTour\gradient.jpg
%WINDIR%\Help\Tours\htmlTour\img004b.jpg
%WINDIR%\Help\Tours\htmlTour\img033.jpg
%WINDIR%\Help\Tours\htmlTour\img014.jpg
%WINDIR%\Help\Tours\htmlTour\img109.jpg
%WINDIR%\Help\Tours\htmlTour\img103.jpg
%WINDIR%\Help\Tours\htmlTour\img110.jpg
%WINDIR%\Help\Tours\htmlTour\img121.jpg
%WINDIR%\Help\Tours\htmlTour\img116.jpg
%WINDIR%\Help\Tours\htmlTour\img072.jpg
%WINDIR%\Help\Tours\htmlTour\img068.jpg
%WINDIR%\Help\Tours\htmlTour\img074a.jpg
%WINDIR%\Help\Tours\htmlTour\img100.jpg
%WINDIR%\Help\Tours\htmlTour\img089.jpg
%WINDIR%\Help\Tours\htmlTour\safe_fr.htm
%WINDIR%\Help\Tours\mmTour\nav.txt
%WINDIR%\Help\Tours\mmTour\intro.txt
%WINDIR%\Help\Tours\mmTour\segment1.txt
%WINDIR%\Help\Tours\mmTour\segment3.txt
%WINDIR%\Help\Tours\mmTour\segment2.txt
%WINDIR%\Help\Tours\htmlTour\unlock_playing.jpg
%WINDIR%\Help\Tours\htmlTour\unlock_playing.htm
%WINDIR%\Help\Tours\htmlTour\unlock_playing_big.jpg
%WINDIR%\Help\Tours\htmlTour\window_up.jpg
%WINDIR%\Help\Tours\htmlTour\unlock_playing_ghost.jpg
%WINDIR%\Help\Tours\WindowsMediaPlayer\Video\nuskin.wmv
%WINDIR%\Help\Tours\WindowsMediaPlayer\Video\mdlib.wmv
%WINDIR%\Help\Tours\WindowsMediaPlayer\Video\rtuner.wmv
%WINDIR%\Help\update.cnt
%WINDIR%\Help\Tours\WindowsMediaPlayer\Video\viz.wmv
%WINDIR%\Help\Tours\mmTour\segment5.txt
%WINDIR%\Help\Tours\mmTour\segment4.txt
%WINDIR%\Help\Tours\WindowsMediaPlayer\Audio\snd.htm
%WINDIR%\Help\Tours\WindowsMediaPlayer\Video\copycd.wmv
%WINDIR%\Help\Tours\WindowsMediaPlayer\Cnt\contents.htm
%WINDIR%\Help\Tours\htmlTour\unlock_optimized_ghost.jpg
%WINDIR%\Help\Tours\htmlTour\start_menu.htm
%WINDIR%\Help\Tours\htmlTour\start_icons.htm
%WINDIR%\Help\Tours\htmlTour\start_taskbar.htm
%WINDIR%\Help\Tours\htmlTour\start_windows.htm
%WINDIR%\Help\Tours\htmlTour\start_up.jpg
%WINDIR%\Help\Tours\htmlTour\start_desktop.htm
%WINDIR%\Help\Tours\htmlTour\start_control.htm
%WINDIR%\Help\Tours\htmlTour\start_ending.htm
%WINDIR%\Help\Tours\htmlTour\start_fr.htm
%WINDIR%\Help\Tours\htmlTour\start_files.htm
%WINDIR%\Help\Tours\htmlTour\unlock_fr.htm
%WINDIR%\Help\Tours\htmlTour\unlock_built_ghost.jpg
%WINDIR%\Help\Tours\htmlTour\unlock_optimized.htm
%WINDIR%\Help\Tours\htmlTour\unlock_optimized_big.jpg
%WINDIR%\Help\Tours\htmlTour\unlock_optimized.jpg
%WINDIR%\Help\Tours\htmlTour\ul_logo.jpg
%WINDIR%\Help\Tours\htmlTour\taskbar_up.jpg
%WINDIR%\Help\Tours\htmlTour\unlock_built.htm
%WINDIR%\Help\Tours\htmlTour\unlock_built_big.jpg
%WINDIR%\Help\Tours\htmlTour\unlock_built.jpg
%WINDIR%\Help\charmap.hlp
%WINDIR%\Help\charmap.chm
%WINDIR%\Help\ciadmin.htm
%WINDIR%\Help\colormgt.chm
%WINDIR%\Help\ciquery.htm
%WINDIR%\Driver Cache\i386\msxpsdrv.inf
%WINDIR%\Cursors\wait_rm.cur
%WINDIR%\FeatherTexture.bmp
%WINDIR%\Greenstone.bmp
%WINDIR%\Gone Fishing.bmp
%WINDIR%\Help\migwiz2.htm
%WINDIR%\Help\migwiz.htm
%WINDIR%\Help\nusrmgr.chm
%WINDIR%\Help\nwdoc.hlp
%WINDIR%\Help\nwdoc.chm
%WINDIR%\Help\datetime.chm
%WINDIR%\Help\compstui.hlp
%WINDIR%\Help\hypertrm.chm
%WINDIR%\Help\ixqlang.htm
%WINDIR%\Help\hypertrm.hlp
%WINDIR%\Cursors\up_rm.cur
%WINDIR%\Cursors\arrow_rm.cur
%WINDIR%\Cursors\appstart.ani
%WINDIR%\Cursors\beam_rm.cur
%WINDIR%\Cursors\cross_rm.cur
%WINDIR%\Cursors\busy_rm.cur
%WINDIR%\bootstat.dat
%WINDIR%\Blue Lace 16.bmp
%WINDIR%\Coffee Bean.bmp
%WINDIR%\Cursors\appstar3.ani
%WINDIR%\Cursors\appstar2.ani
%WINDIR%\Cursors\size1_rm.cur
%WINDIR%\Cursors\pen_rm.cur
%WINDIR%\Cursors\size2_rm.cur
%WINDIR%\Cursors\size4_rm.cur
%WINDIR%\Cursors\size3_rm.cur
%WINDIR%\Cursors\help_rm.cur
%WINDIR%\Cursors\handapst.ani
%WINDIR%\Cursors\lappstrt.cur
%WINDIR%\Cursors\no_rm.cur
%WINDIR%\Cursors\move_rm.cur
%WINDIR%\Help\pwrmn.chm
%WINDIR%\Help\Tours\htmlTour\connected_networks.jpg
%WINDIR%\Help\Tours\htmlTour\connected_networks.htm
%WINDIR%\Help\Tours\htmlTour\connected_networks_big.jpg
%WINDIR%\Help\Tours\htmlTour\connected_wizard.htm
%WINDIR%\Help\Tours\htmlTour\connected_networks_ghost.jpg
%WINDIR%\Help\Tours\htmlTour\connected_multiple.htm
%WINDIR%\Help\Tours\htmlTour\connected_fr.htm
%WINDIR%\Help\Tours\htmlTour\connected_multiple.jpg
%WINDIR%\Help\Tours\htmlTour\connected_multiple_ghost.jpg
%WINDIR%\Help\Tours\htmlTour\connected_multiple_big.jpg
%WINDIR%\Help\Tours\htmlTour\desktop_up.jpg
%WINDIR%\Help\Tours\htmlTour\desktop_screen_shot.jpg
%WINDIR%\Help\Tours\htmlTour\end_up.jpg
%WINDIR%\Help\Tours\htmlTour\footer.htm
%WINDIR%\Help\Tours\htmlTour\folder_up.jpg
%WINDIR%\Help\Tours\htmlTour\connected_wizard_big.jpg
%WINDIR%\Help\Tours\htmlTour\connected_wizard.jpg
%WINDIR%\Help\Tours\htmlTour\connected_wizard_ghost.jpg
%WINDIR%\Help\Tours\htmlTour\default.htm
%WINDIR%\Help\Tours\htmlTour\control_up.jpg
%WINDIR%\Help\Tours\htmlTour\connected_data_ghost.jpg
%WINDIR%\Help\Tours\htmlTour\best_road.jpg
%WINDIR%\Help\Tours\htmlTour\best_road.htm
%WINDIR%\Help\Tours\htmlTour\best_road_big.jpg
%WINDIR%\Help\Tours\htmlTour\best_robust.htm
%WINDIR%\Help\Tours\htmlTour\best_road_ghost.jpg
%WINDIR%\Help\regedit.chm
%WINDIR%\Help\pwrmn.hlp
%WINDIR%\Help\regedit.hlp
%WINDIR%\Help\Tours\htmlTour\best_fr.htm
%WINDIR%\Help\regopt.chm
%WINDIR%\Help\Tours\htmlTour\best_secure_ghost.jpg
%WINDIR%\Help\Tours\htmlTour\best_secure_big.jpg
%WINDIR%\Help\Tours\htmlTour\connected_data.htm
%WINDIR%\Help\Tours\htmlTour\connected_data_big.jpg
%WINDIR%\Help\Tours\htmlTour\connected_data.jpg
%WINDIR%\Help\Tours\htmlTour\best_robust_big.jpg
%WINDIR%\Help\Tours\htmlTour\best_robust.jpg
%WINDIR%\Help\Tours\htmlTour\best_robust_ghost.jpg
%WINDIR%\Help\Tours\htmlTour\best_secure.jpg
%WINDIR%\Help\Tours\htmlTour\best_secure.htm
%WINDIR%\Help\update1.chm
%WINDIR%\pchealth\helpctr\System\panels\subpanels\Favorites.htm
%WINDIR%\pchealth\helpctr\System\panels\subpanels\Channels.htm
%WINDIR%\pchealth\helpctr\System\panels\subpanels\History.htm
%WINDIR%\pchealth\helpctr\System\panels\subpanels\Options.htm
%WINDIR%\pchealth\helpctr\System\panels\subpanels\Index.htm
%WINDIR%\pchealth\helpctr\System\panels\NavBar.htm
%WINDIR%\pchealth\helpctr\System\panels\MiniNavBar.htm
%WINDIR%\pchealth\helpctr\System\panels\Options.htm
%WINDIR%\pchealth\helpctr\System\panels\ShareHelp.htm
%WINDIR%\pchealth\helpctr\System\panels\RemoteHelp.htm
%WINDIR%\pchealth\helpctr\System\Remote Assistance\Common\LearnInternet.htm
%WINDIR%\pchealth\helpctr\System\Remote Assistance\Common\icon_information_32x.gif
%WINDIR%\pchealth\helpctr\System\Remote Assistance\Common\RAHelp.htm
%WINDIR%\pchealth\helpctr\System\Remote Assistance\helpeeaccept.htm
%WINDIR%\pchealth\helpctr\System\Remote Assistance\Common\RCMoreInfo.htm
%WINDIR%\pchealth\helpctr\System\panels\subpanels\Subsite.htm
%WINDIR%\pchealth\helpctr\System\panels\subpanels\Search.htm
%WINDIR%\pchealth\helpctr\System\panels\Topics.htm
%WINDIR%\pchealth\helpctr\System\Remote Assistance\Common\ConnIssue.htm
%WINDIR%\pchealth\helpctr\System\rc\rcRequest.htm
%WINDIR%\pchealth\helpctr\System\panels\HHWrapper.htm
%WINDIR%\pchealth\helpctr\System\images\48x48\desktop_icon_generic.bmp
%WINDIR%\pchealth\helpctr\System\images\48x48\desktop_icon_04.bmp
%WINDIR%\pchealth\helpctr\System\images\Expando\helpdoc.gif
%WINDIR%\pchealth\helpctr\System\images\icon_blank_12x.bmp
%WINDIR%\pchealth\helpctr\System\images\icon_articles_12x.bmp
%WINDIR%\pchealth\helpctr\System\images\32x32\logo.bmp
%WINDIR%\pchealth\helpctr\System\images\24x24\arrow_green_normal.bmp
%WINDIR%\pchealth\helpctr\System\images\48x48\desktop_icon_01.bmp
%WINDIR%\pchealth\helpctr\System\images\48x48\desktop_icon_03.bmp
%WINDIR%\pchealth\helpctr\System\images\48x48\desktop_icon_02.bmp
%WINDIR%\pchealth\helpctr\System\panels\AdvSearch.htm
%WINDIR%\pchealth\helpctr\System\NetDiag\dglogshelp.htm
%WINDIR%\pchealth\helpctr\System\panels\blank.htm
%WINDIR%\pchealth\helpctr\System\panels\firstpage.htm
%WINDIR%\pchealth\helpctr\System\panels\Context.htm
%WINDIR%\pchealth\helpctr\System\images\icon_onlineinline_12x.bmp
%WINDIR%\pchealth\helpctr\System\images\icon_newwindow_12x.bmp
%WINDIR%\pchealth\helpctr\System\images\icon_tours_12x.bmp
%WINDIR%\pchealth\helpctr\System\NetDiag\dglogs.htm
%WINDIR%\pchealth\helpctr\System\images\icon_tutorials_12x.bmp
%WINDIR%\pchealth\helpctr\System\Remote Assistance\Interaction\Client\DividerBar.htm
%WINDIR%\pchealth\helpctr\System\sysinfo\graphics\down.bmp
%WINDIR%\pchealth\helpctr\System\Remote Assistance\rcBuddy.htm
%WINDIR%\pchealth\helpctr\System\sysinfo\graphics\greendot.jpg
%WINDIR%\pchealth\helpctr\System\sysinfo\msinfo.htm
%WINDIR%\pchealth\helpctr\System\sysinfo\graphics\up.bmp
%WINDIR%\pchealth\helpctr\System\Remote Assistance\Interaction\Server\SettingServer.htm
%WINDIR%\pchealth\helpctr\System\Remote Assistance\Interaction\Server\RAServerToolBar.htm
%WINDIR%\pchealth\helpctr\System\Remote Assistance\Interaction\Server\StopControl.bmp
%WINDIR%\pchealth\helpctr\System\Remote Assistance\RAStartPage.htm
%WINDIR%\pchealth\helpctr\System\Remote Assistance\Interaction\Server\TakeControlMsgs.htm
%WINDIR%\pchealth\helpctr\System\sysinfo\sysInfoLaunch.htm
%WINDIR%\pchealth\helpctr\System\sysinfo\sysHealthInfo.htm
%WINDIR%\pchealth\helpctr\System\sysinfo\sysinfomain.htm
%WINDIR%\pchealth\helpctr\System\sysinfo\sysRemoteInfo.htm
%WINDIR%\pchealth\helpctr\System\sysinfo\sysinfosum.htm
%WINDIR%\pchealth\helpctr\System\sysinfo\sysComponentInfo.htm
%WINDIR%\pchealth\helpctr\System\sysinfo\RSoP.htm
%WINDIR%\pchealth\helpctr\System\sysinfo\sysConfigLaunch.htm
%WINDIR%\pchealth\helpctr\System\sysinfo\sysEvtLogInfo.htm
%WINDIR%\pchealth\helpctr\System\sysinfo\sysDiskTS.htm
%WINDIR%\pchealth\helpctr\System\Remote Assistance\Interaction\Server\RAServer.htm
%WINDIR%\pchealth\helpctr\System\Remote Assistance\Interaction\Client\setting.htm
%WINDIR%\pchealth\helpctr\System\Remote Assistance\Interaction\Client\rctoolScreen1.htm
%WINDIR%\pchealth\helpctr\System\Remote Assistance\Interaction\Client\TakeControl.bmp
%WINDIR%\pchealth\helpctr\System\Remote Assistance\Interaction\Common\HelpCenter.bmp
%WINDIR%\pchealth\helpctr\System\Remote Assistance\Interaction\Common\ErrorMsgs.htm
%WINDIR%\pchealth\helpctr\System\Remote Assistance\Interaction\Client\RAClient.htm
%WINDIR%\pchealth\helpctr\System\Remote Assistance\Interaction\Client\RAChatClient.htm
%WINDIR%\pchealth\helpctr\System\Remote Assistance\Interaction\Client\RAStatusBar.htm
%WINDIR%\pchealth\helpctr\System\Remote Assistance\Interaction\Client\rcscreen6_head.htm
%WINDIR%\pchealth\helpctr\System\Remote Assistance\Interaction\Client\RAToolBar.htm
%WINDIR%\pchealth\helpctr\System\Remote Assistance\Interaction\Common\VOIPMsgs.htm
%WINDIR%\pchealth\helpctr\System\Remote Assistance\Interaction\Common\voicefirewallmsg.htm
%WINDIR%\pchealth\helpctr\System\Remote Assistance\Interaction\Server\DividerBar1.htm
%WINDIR%\pchealth\helpctr\System\Remote Assistance\Interaction\Server\RAChatServer.htm
%WINDIR%\pchealth\helpctr\System\Remote Assistance\Interaction\Server\DividerBar2.htm
%WINDIR%\pchealth\helpctr\System\Remote Assistance\Interaction\Common\Quit.bmp
%WINDIR%\pchealth\helpctr\System\Remote Assistance\Interaction\Common\Options.bmp
%WINDIR%\pchealth\helpctr\System\Remote Assistance\Interaction\Common\RCFileXfer.htm
%WINDIR%\pchealth\helpctr\System\Remote Assistance\Interaction\Common\SendVoice.bmp
%WINDIR%\pchealth\helpctr\System\Remote Assistance\Interaction\Common\SendFile.bmp
%WINDIR%\ocx\msrdc20.ocx
%WINDIR%\ocx\msmask32.ocx
%WINDIR%\ocx\mswinsck.ocx
%WINDIR%\ocx\sysinfo.ocx
%WINDIR%\ocx\picclp32.ocx
%WINDIR%\ocx\mshtmpgr.dll
%WINDIR%\ocx\mshflxgd.ocx
%WINDIR%\ocx\mshtmpgr.inf
%WINDIR%\ocx\msmapi32.ocx
%WINDIR%\ocx\msinet.ocx
%WINDIR%\pchealth\helpctr\Config\sereg.xml
%WINDIR%\pchealth\helpctr\Config\dataspec.xml
%WINDIR%\pchealth\helpctr\Database\HCdata.edb
%WINDIR%\pchealth\helpctr\OfflineCache\index.dat
%WINDIR%\pchealth\helpctr\Logs\hcupdate.log
%WINDIR%\ocx\wbclsdsr.ocx
%WINDIR%\ocx\tabctl32.ocx
%WINDIR%\ocx\_reg_all.bat
%WINDIR%\pchealth\helpctr\Config\Cache\Professional_32_1033.dat.bak
%WINDIR%\OEWABLog.txt
%WINDIR%\ocx\msdatrep.ocx
%WINDIR%\ocx\comdlg32.ocx
%WINDIR%\ocx\comctl32.ocx
%WINDIR%\ocx\dbgrid32.ocx
%WINDIR%\ocx\mci32.ocx
%WINDIR%\ocx\dblist32.ocx
%WINDIR%\Microsoft.NET\Framework\sbs_system.data.dll
%WINDIR%\Media\Windows XP Information Bar.wav
%WINDIR%\nsreg.dat
%WINDIR%\ocx\comct332.ocx
%WINDIR%\ocx\comct232.ocx
%WINDIR%\ocx\msdatgrd.ocx
%WINDIR%\ocx\msdatgrd.inf
%WINDIR%\ocx\msdatlst.inf
%WINDIR%\ocx\msdatrep.inf
%WINDIR%\ocx\msdatlst.ocx
%WINDIR%\ocx\mschrt20.ocx
%WINDIR%\ocx\msadodc.ocx
%WINDIR%\ocx\mscomct2.ocx
%WINDIR%\ocx\mscomm32.ocx
%WINDIR%\ocx\mscomctl.ocx
%WINDIR%\pchealth\helpctr\System\blurbs\about_support.htm
%WINDIR%\pchealth\helpctr\System\errors\redirect.htm
%WINDIR%\pchealth\helpctr\System\errors\offline.htm
%WINDIR%\pchealth\helpctr\System\errors\unreachable.htm
%WINDIR%\pchealth\helpctr\System\HomePage__DESKTOP.htm
%WINDIR%\pchealth\helpctr\System\Headlines.htm
%WINDIR%\pchealth\helpctr\System\errors\badurl.htm
%WINDIR%\pchealth\helpctr\System\ErrMsg\ErrorMessagesOffline.htm
%WINDIR%\pchealth\helpctr\System\errors\connection.htm
%WINDIR%\pchealth\helpctr\System\errors\notfound.htm
%WINDIR%\pchealth\helpctr\System\errors\indexfirstlevel.htm
%WINDIR%\pchealth\helpctr\System\images\16x16\tools.bmp
%WINDIR%\pchealth\helpctr\System\images\16x16\support.bmp
%WINDIR%\pchealth\helpctr\System\images\16x16\update.bmp
%WINDIR%\pchealth\helpctr\System\images\24x24\arrow_green_mouseover.bmp
%WINDIR%\pchealth\helpctr\System\images\24x24\arrow_green_mousedown.bmp
%WINDIR%\pchealth\helpctr\System\images\16x16\arrow_blue_normal_shadow.bmp
%WINDIR%\pchealth\helpctr\System\HomePage__SERVER.htm
%WINDIR%\pchealth\helpctr\System\images\16x16\arrow_green_normal_shadow.bmp
%WINDIR%\pchealth\helpctr\System\images\16x16\errmsg.bmp
%WINDIR%\pchealth\helpctr\System\images\16x16\compat.bmp
%WINDIR%\pchealth\helpctr\System\DVDUpgrd\stripe.jpg
%WINDIR%\pchealth\helpctr\System\blurbs\options.htm
%WINDIR%\pchealth\helpctr\System\blurbs\keywordhelp.htm
%WINDIR%\pchealth\helpctr\System\blurbs\searchblurb.htm
%WINDIR%\pchealth\helpctr\System\blurbs\tools.htm
%WINDIR%\pchealth\helpctr\System\blurbs\searchtips.htm
%WINDIR%\pchealth\helpctr\System\blurbs\ftshelp.htm
%WINDIR%\pchealth\helpctr\System\blurbs\Favorites.htm
%WINDIR%\pchealth\helpctr\System\blurbs\History.htm
%WINDIR%\pchealth\helpctr\System\blurbs\isupport.htm
%WINDIR%\pchealth\helpctr\System\blurbs\Index.htm
%WINDIR%\pchealth\helpctr\System\DFS\privacy.htm
%WINDIR%\pchealth\helpctr\System\CompatCtr\LearnCompat.htm
%WINDIR%\pchealth\helpctr\System\DFS\uplddrvinfo.htm
%WINDIR%\pchealth\helpctr\System\DVDUpgrd\dvdupgrd.htm
%WINDIR%\pchealth\helpctr\System\DFS\xmldialog.htm
%WINDIR%\pchealth\helpctr\System\blurbs\windows_newsgroups.htm
%WINDIR%\pchealth\helpctr\System\blurbs\watermark_300x.bmp
%WINDIR%\pchealth\helpctr\System\CompatCtr\AboutCompat.htm
%WINDIR%\pchealth\helpctr\System\CompatCtr\CompatOffline.htm
%WINDIR%\pchealth\helpctr\System\CompatCtr\CompatMode.htm

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней